Description
The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap corruption.
References (8)
Core 8
Core References
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/499315/100/0/threaded
Vendor Advisory x_refsource_confirm
http://www.opera.com/docs/changelogs/linux/963/
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/4791
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1021460
Vendor Advisory x_refsource_confirm
http://www.opera.com/support/kb/view/921/
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/34294
Various Sources x_refsource_misc
http://www.nruns.com/security_advisory_opera_html_parsing_code_execution.php
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200903-30.xml
Scores
EPSS
0.0120
EPSS Percentile
79.1%
Details
CWE
CWE-399
Status
published
Products (35)
opera/opera
opera/opera
5..10
opera/opera
5.0 (8 CPE variants)
opera/opera
5.1
opera/opera
5.02
opera/opera
5.2
opera/opera
5.3
opera/opera
5.4
opera/opera
5.5
opera/opera
5.6
... and 25 more
Published
Dec 19, 2008
Tracked Since
Feb 18, 2026